Conscious Health Connections, LLC ("CHC," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit chealthconnections.com, use the IgoeScan tool, or enroll in our services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our site.
1. Information We Collect
We may collect the following categories of personal information:
- Identity & Contact Data: First name, last name, email address, phone number, and practice name — collected when you complete our enrollment form, contact us, or subscribe to communications.
- Practice Information: Medical specialty, website URL, business address, service goals, and current marketing challenges — provided voluntarily during enrollment.
- Payment Data: All payments are processed by Stripe, Inc. We do not store, transmit, or have access to your credit card numbers or full banking details. Stripe's privacy policy governs payment data.
- Technical & Usage Data: IP address, browser type and version, pages visited, time and date of visit, time spent on pages, and referring URLs — collected automatically via server logs and analytics tools.
- Scan Data: Website URLs entered into the IgoeScan tool are fetched and analyzed in real time. This data is not permanently stored or linked to your identity unless you proceed to enrollment.
- Electronic Signature: When you enroll, your typed full legal name is captured as your e-signature, along with a timestamp and IP address, for legal record-keeping purposes.
- Cookie Data: We use cookies and similar tracking technologies to enhance site functionality and analyze usage. See Section 6 for details.
2. How We Use Your Information
We use the information we collect for the following purposes:
- To deliver, manage, and improve the CHC AI Readiness Program services you enrolled in
- To communicate with you about your program, reports, invoices, and updates
- To process payments through our third-party payment processor (Stripe)
- To send service-related emails and notifications (not promotional without your consent)
- To analyze website usage and improve user experience
- To comply with applicable laws and regulations
- To enforce our Terms of Service and protect our legal rights
- To maintain records of e-signatures and service agreements as required by law
3. Legal Basis for Processing (GDPR / California Residents)
For users in the European Economic Area or California, we process your personal data on the following legal bases:
- Contract performance: Processing necessary to fulfill our service agreement with you
- Legitimate interests: Improving our services, analyzing usage, and marketing to prospective clients
- Consent: Where you have explicitly opted in to communications
- Legal obligation: Complying with applicable laws and regulations
California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at jeff.igoe@chealthconnections.com.
4. Sharing and Disclosure of Information
We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:
- Service Providers: Trusted third parties who assist in operating our business, including Stripe (payments), Formspree (form processing), and Google Analytics (website analytics). These providers are contractually bound to protect your data and use it only as directed.
- Legal Requirements: When required by law, court order, or government authority, or when necessary to protect our rights, property, or safety.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. You will be notified via email and/or a prominent notice on our website.
- With Your Consent: In any other circumstance where you have provided explicit consent.
5. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Specifically:
- Client records and service agreements are retained for 7 years following the end of the service relationship
- Payment records are retained as required by financial regulations
- E-signature records are retained for the duration required by the E-SIGN Act
- Analytics data is retained for up to 26 months
6. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Remember your preferences and settings
- Analyze how visitors use our website (via Google Analytics)
- Improve site performance and user experience
You may disable cookies in your browser settings at any time. However, doing so may affect the functionality of certain features on our site. A cookie consent banner is displayed on your first visit to the site. By continuing to use the site after dismissing the banner, you consent to our use of essential cookies.
7. Data Security
We implement commercially reasonable technical and organizational security measures to protect your personal information, including:
- SSL/TLS encryption on all pages (HTTPS)
- Secure hosting infrastructure
- Limited access to personal data on a need-to-know basis
- Regular review of data collection and storage practices
No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.
8. Third-Party Links
Our website may contain links to third-party websites, including igoescan.com, Stripe, and others. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.
9. Children's Privacy
Our website and services are directed to adults operating medical practices. We do not knowingly collect personal information from individuals under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us immediately.
10. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data ("right to be forgotten")
- Portability: Request transfer of your data in a machine-readable format
- Objection: Object to processing of your data for certain purposes
- Withdraw Consent: Where processing is based on consent, withdraw it at any time
To exercise any of these rights, email us at jeff.igoe@chealthconnections.com. We will respond within 30 days.
11. Changes to This Policy
We reserve the right to update this Privacy Policy at any time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will provide notice via email to enrolled clients or a prominent banner on the website. Your continued use of our services following any changes constitutes acceptance of the revised policy.
Not Legal Advice: This Privacy Policy is a binding document between you and CHC. If you have legal questions about data privacy compliance for your own medical practice, please consult a qualified attorney. CHC does not provide legal advice.